From 55140153e66f13a2d8a673a48f6c21e293415e56 Mon Sep 17 00:00:00 2001 From: Steve Sakoman Date: Mon, 26 Jul 2021 04:22:32 -1000 Subject: [PATCH] gstreamer: ignore CVE-2021-3497, CVE-2021-3498, and CVE-2021-3522 CPE entries for gst-plugins-* are listed as gstreamer issues so we need to ignore the false hits for the CVEs we've patched in plugins recipes Signed-off-by: Steve Sakoman --- meta/recipes-multimedia/gstreamer/gstreamer1.0_1.16.3.bb | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.16.3.bb b/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.16.3.bb index 7afe56cd7b..a516fabdaf 100644 --- a/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.16.3.bb +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.16.3.bb @@ -74,4 +74,13 @@ FILES_${PN}-dbg += "${datadir}/gdb ${datadir}/gstreamer-1.0/gdb" CVE_PRODUCT = "gstreamer" +# CPE entries for gst-plugins-base are listed as gstreamer issues +# so we need to ignore the false hits +CVE_CHECK_WHITELIST += "CVE-2021-3522" + +# CPE entries for gst-plugins-good are listed as gstreamer issues +# so we need to ignore the false hits +CVE_CHECK_WHITELIST += "CVE-2021-3497" +CVE_CHECK_WHITELIST += "CVE-2021-3498" + require gstreamer1.0-ptest.inc -- 2.40.1